212-89 Question #101: Real Exam Question with Answer & Explanation

The correct answer is D. Preserving temporary and fragile evidence and then shut down or reboot the victim's computer. The responsibility of first responders does not include shutting down or rebooting the victim's computer as a measure to preserve temporary and fragile evidence. In fact, such actions can potentially alter or destroy volatile data that could be crucial for the investigation. The

Question

Which of the following is not the responsibility of first responders?

Options

AProtecting the crime scene
BIdentifying the crime scene
CPackaging and transporting the electronic evidence
DPreserving temporary and fragile evidence and then shut down or reboot the victim's computer

Explanation

The responsibility of first responders does not include shutting down or rebooting the victim's computer as a measure to preserve temporary and fragile evidence. In fact, such actions can potentially alter or destroy volatile data that could be crucial for the investigation. The primary responsibilities of first responders include protecting and identifying the crime scene, and ensuring the preservation of evidence in its original state as much as possible, which may involve isolating affected systems from the network but not necessarily shutting them down or rebooting them without proper forensic readiness and consideration.

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice